grupoboticario.pt — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Página Inicial - Grupo Boticário Portugal
Language: pt-PT
Canonical: https://www.grupoboticario.pt/

Open Graph

url: https://www.grupoboticario.pt/
title: Página Inicial - Grupo Boticário Portugal
locale: pt_PT
site name: Grupo Boticário Portugal

Technology

CDN: Cloudflare
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Cookie consent

OneTrust

Social widgets

YouTube Embed

Third-party hosts loaded (4)

widget.tagembed.com×3
www.googletagmanager.com×2
cdn.cookielaw.org×1
www.youtube.com×1

Social

DNS records live

NS

ns-1292.awsdns-33.org
ns-134.awsdns-16.com
ns-1976.awsdns-55.co.uk
ns-595.awsdns-10.net

MX

10 mx0a-006c5002.pphosted.com
10 mx0b-006c5002.pphosted.com

Verified for

Google
Miro
OneTrust
Workplace

Email authentication strong

SPF: v=spf1 ip4:88.157.197.155 ip4:88.157.197.156 ip4:88.157.197.157 ip4:88.157.197.158 ip4:18.188.239.128/26 ip4:18.188.9.192/26 ip4:18.208.22.128/25 ip4:18.208.22.64/26 include:spf.protection.outlook.com include:_spf.google.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:incidente@grupoboticario.pt; pct=40;
policy: quarantine · pct=40
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-06-08 to 2026-09-06

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.grupoboticario.pt/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com/iframe_api cdn.cookielaw.org *.google-analytics.com *.googletagmanager.com *.tiktok.com *.facebook.net snap.licdn.com googleads.g.doubleclick.net px.ads.linkedin.com *.hotjar.com *.clarity.ms *.grupoboticario.com.br *.youtube.com *.tagembed.com platform.twitter.com; img-src 'self' data: ps.w.org *.linkedin.com *.googletagmanager.com secure.gravatar.com *.google-analytics.com *.facebook.com www.glassdoor.com.br s.w.org px.ads.linkedin.com *.google.com.br *.google.com *.clarity.ms *.bing.com i.ytimg.com *.tagembed.com *.tiktokcdn.com ui-avatars.com; style-src 'self' 'unsafe-inline' data: fonts.googleapis.com *.tagembed.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.tagembed.com; form-action 'self' *.facebook.com; frame-src 'self' *.facebook.com widget.tagembed.com *.youtube.com td.doubleclick.net airtable.com *.twitter.com; connect-src 'self' *.google-analytics.com stats.g.doubleclick.n
strict-transport-security: max-age=63072000; includeSubDomains; preload

Links to (9)

Linked from (1)

oboticario.pt×2

Use this data via API

Everything on this page for grupoboticario.pt is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/grupoboticario.pt" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →

Add a badge to your site

Own grupoboticario.pt? Show it's tracked on indexo.dev and link visitors straight to this page.

<a href="https://indexo.dev/grupoboticario.pt" target="_blank" rel="noopener">
  <img src="https://indexo.dev/grupoboticario.pt/badge.svg" alt="indexo.dev — grupoboticario.pt">
</a>